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- The MAILING DA TE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )|3 Responsive to communication(s) filed on 16 August 2005 . 
2a)M This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) S Claim(s) 7-79 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) I3 Ciaim(s) 7-79 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) Q The specification is objected to by the Examiner. 

10) 13 The drawing(s) filed on 30 January 2002 is/are: a)[3 accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2.D Certified copies of the priority documents have been received in Application No. . 



3.D Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . Claims 1-19 have been examined. 

Claim Rejections - 35 USC § 112 

2. The following is a quotation of the first paragraph of 35 U.S.C 1 12: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

3. Claims 3, 9, and 14 are rejected under 35 U.S.C. 112, first paragraph, as failing to 
comply with the enablement requirement. The claim(s) contains subject matter which 
was not described in the specification in such a way as to enable one skilled in the art to 
which it pertains, or with which it is most nearly connected, to make and/or use the 
invention. The specification does not disclose erasing the authenticated parameter table 
upon a successful authentication of a predefined number of unauthenticated user 
parameters. Instead, the specification discloses erasing data after a time-out or period of 
inactivity (page 14 lines 5-15). The claimed limitation does not exactly correspond to the 
limitation disclosed in the specification. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at the time the invention was made to a 
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pertains. Patentability shall not be negatived 



5. Claims 1-19 are rejected under 35 U.S.C 103(a) as being unpatentable over Fuh 
et al. U.S. Pat. No. 6463474 (hereinafter Fuh) in view of Crawford UK Pat. Application 
No. 2331820 (hereinafter Crawford) and further in view of Moreh et al. U.S. Pub. No. 
20030046391 (hereinafter Moreh). 

6. As per claim 1, Fuh discloses a method for parameter authentication, comprising: 
examining an authenticated parameter table to determine whether an unauthenticated user 
parameter is listed therein (Fuh: abstract and column 3 lines 1-19 and lines 60: local 
authentication and if local authentication fails, perform remote authentication); and 
bypassing authentication of the unauthenticated user parameter if the unauthenticated 
user parameter is listed in the authenticated parameter table (Fuh: abstract and column 3 
lines 1-19 and lines 60: local authentication and if local authentication fails, perform 
remote authentication). Fuh does not explicitly disclose executing a plurality of 
authentication agents in a computer system, each of the authentication agents being 
configured to initiate the performance of at least one authentication task to authenticate 
an unauthenticated user parameter for one of a plurality of functions, each of the 
functions corresponding to one of the authentication agents and for each respective one of 
the authentication agents, perform the above mentioned authentication technique. 
However, Crawford discloses a multi-functional computer system that authenticates a 
user prior to authorizing access to functions of the system (Crawford: page 1 lines 5-7: 
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multi- function systems; page 1 lines 12-25). It would have been obvious to one having 
ordinary skill in the art to apply the authentication technique in network environment to a 
standalone computing device when access to particular computer function is requested. 
Therefore, it would have been obvious to one having ordinary skill in the art at the time 
of applicant's invention to combine the teachings of Crawford within the system of Fuh 
because it allows computer system functions to be used by unauthorized users. Fuh as 
modified does not explicitly disclose executing a plurality of authentication agents and 
determining which agent to use. However, Moreh discloses a federated authentication 
service that allows a authentication agent to determine which authentication mechanism 
should be used and allows multiple authentication types and multiple authentication 
sources from different domains of protocol (Moreh: [0010], [0015], and [0044]-[0045]). 
It would have been obvious to one having ordinary skill in the art to apply different 
authentication techniques when user requests different program/function because users 
with different roles might use different functions of the computer system. Therefore, it 
would have been obvious to one having ordinary skill in the art at the time of applicant's 
invention to combine the teachings of Moreh within the combination of Fuh-Crawford 
because it different authentication types allows verification of different personal data 
relating to use of the computer system. 



7. As per claim 2, Fuh as modified discloses the method of claim 1 . Fuh further 
discloses the method comprising obtaining the unauthenticated user parameter from a 
user by way of a user interface (Fuh: column 4 lines 4-13). 
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8. As per claim 3, Fuh as modified discloses the method of claim 1. Fuh further 
discloses the method comprising erasing the authenticated parameter table upon a 
successful authentication of a predefined number of unauthenticated user parameters 
(Fuh: column 5 lines 1 1-20: removing the authorization information). 

9. As per claim 4, Fuh as modified discloses the method of claim 1 . Fuh further 
discloses the method comprising initiating the performance of the at least one 
authentication task to authenticate the unauthenticated user parameter if the 
unauthenticated user parameter is not listed in the authenticated parameter table (Fuh: 
abstract and column 3 lines 1-19 and lines 60: local authentication and if local 
authentication fails, perform remote authentication; Moreh: [0044]-[0045]: determining 
suitable authentication mechanism). 

10. As per claim 5, Fuh as modified discloses the method of claim 2. Fuh further 
discloses wherein the step of obtaining the user parameter from a user by way of a user 
interface further comprises obtaining at least one user parameter from the group 
consisting of a biometric parameter, a password, a username, a code, a key, and a 
signature (Fuh: column 4 lines 8-13). 

11. As per claim 6, Fuh discloses the method of claim 4. Fuh further discloses the 
method comprising storing the authenticated user parameter in an authenticated 
parameter table upon a successful authentication thereof (Fuh: column 4 lines 4-13: 
update the authorization information). 
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12. As per claim 7-17, claims 7-17 encompass the same scope as claims 1-6. 
Therefore, claims 7-17 are rejected based on the reasons set forth in claims 1-6. 

13. As per claim 18, Fuh discloses a method for parameter authentication, 
comprising: obtaining the unauthenticated user parameter from a user by way of a user 
interface (Fuh: column 4 lines 8-13); examining an authenticated parameter table to 
determine whether the unauthenticated user parameter is listed therein (Fuh: abstract and 
column 3 lines 1-19 and lines 60: local authentication and if local authentication fails, 
perform remote authentication); bypassing authentication of the unauthenticated user 
parameter if the unauthenticated user parameter is listed in the authenticated parameter 
table therein (Fuh: abstract and column 3 lines 1-19 and lines 60: local authentication and 
if local authentication fails, perform remote authentication); authenticating the 
unauthenticated user parameter if the unauthenticated user parameter is not listed in the 
authenticated parameter table (Fuh: column 4 lines 4-13); and storing the authenticated 
user parameter in the authenticated parameter table upon a successful authentication 
thereof (Fuh: column 4 lines 4-13). Fuh does not explicitly disclose executing a plurality 
of authentication agents in a computer system, each of the authentication agents being 
configured to initiate the performance of at least one authentication task to authenticate 
an unauthenticated user parameter for one of a plurality of functions, each of the 
functions corresponding to one of the authentication agents and for each respective one of 
the authentication agents, perform the above mentioned authentication technique. 
However, Crawford discloses a multi-functional computer system that authenticates a 
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user prior to authorizing access to functions of the system (Crawford: page 1 lines 5-7: 
multi- function systems; page 1 lines 12-25). It would have been obvious to one having 
ordinary skill in the art to apply the authentication technique in network environment to a 
standalone computing device when access to particular computer function is requested. 
Therefore, it would have been obvious to one having ordinary skill in the art at the time 
of applicant's invention to combine the teachings of Crawford within the system of Fuh 
because it allows computer system functions to be used by unauthorized users. Fuh as 
modified does not explicitly disclose executing a plurality of authentication agents and 
determining which agent to use. However, Moreh discloses a federated authentication 
service that allows a authentication agent to determine which authentication mechanism 
should be used and allows multiple authentication types and multiple authentication 
sources from different domains of protocol (Moreh: [0010], [0015], and [0044]-[0045]). 
It would have been obvious to one having ordinary skill in the art to apply different 
authentication techniques when user requests different program/function because users 
with different roles might use different functions of the computer system. Therefore, it 
would have been obvious to one having ordinary skill in the art at the time of applicant's 
invention to combine the teachings of Moreh within the combination of Fuh-Crawford 
because it different authentication types allows verification of different personal data 
relating to use of the computer system. 

14. As per claim 19, claim 19 encompasses the same scope as claim 18. Therefore, 
claim 19 is rejected based on the same reason set forth in claim 18. 
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Response to Arguments 

15. Applicant's arguments with respect to claims 1-19 have been considered but are 
moot in view of the new ground(s) of rejection. 

Conclusion 

16. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Bauman et al. U.S. Pat. No. 689871 1 discloses user authentication system and 
method for multiple process applications. 

17. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of 
time policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1. 136(a) will be calculated from the mailing date of the 
advisory action. In no event, however, will the statutory period for reply expire later than 
SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shin-Hon Chen whose telephone number is (571) 272- 
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3789. The examiner can normally be reached on Monday through Friday 8:30am to 
5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 

Shin-Hon Chen 
Examiner 
Art Unit 2131 

SC 
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